How to apply least-privilege access to autonomous AI agents

An AI agent with a broad role and a long-lived token is one poisoned ticket away from acting against you. Scoping it down takes more than trimming permissions because every action needs its own tested boundary, a credential that expires with the task, and an authorization check the model can't talk…